You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2009/02/01 19:54:11 UTC
DO NOT REPLY [Bug 46646] New: lowercase username
https://issues.apache.org/bugzilla/show_bug.cgi?id=46646
Summary: lowercase username
Product: Apache httpd-2
Version: 2.2.10
Platform: PC
OS/Version: Windows XP
Status: NEW
Severity: enhancement
Priority: P2
Component: mod_auth_ldap
AssignedTo: bugs@httpd.apache.org
ReportedBy: email@cs-ware.de
It would be nice to have an option which allowes to lowercase the username
before sending to the ldap server.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 46646] lowercase username
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46646
--- Comment #6 from Sven Strickroth <em...@cs-ware.de> 2009-02-06 08:25:45 PST ---
Created an attachment (id=23238)
--> (https://issues.apache.org/bugzilla/attachment.cgi?id=23238)
use the username gathered from AuthLDAPRemoteUserAttribute
this patch seems to fix this issue
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 46646] check group membership is sometimes case
sensitive
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46646
Sven Strickroth <em...@cs-ware.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #23238|1 |0
is obsolete| |
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 46646] check group membership is sometimes case sensitive
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46646
Christophe JAILLET <ch...@wanadoo.fr> changed:
What |Removed |Added
----------------------------------------------------------------------------
Keywords| |PatchAvailable
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 46646] check group membership is sometimes case
sensitive
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46646
Sven Strickroth <em...@cs-ware.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|lowercase username |check group membership is
| |sometimes case sensitive
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 46646] lowercase username
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46646
--- Comment #1 from Eric Covener <co...@gmail.com> 2009-02-01 14:09:26 PST ---
Does this mean samAccountName on MSAD is case-sensitive? I couldn't figure out
the doc and my test system is kaput. Or are you hitting some other
specifically case-sensitive attribute in your DN lookup?
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 46646] check group membership is sometimes case
sensitive
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46646
Sven Strickroth <em...@cs-ware.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
Platform|PC |All
Version|2.2.11 |2.2.14
OS/Version|Windows XP |All
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 46646] check group membership is sometimes case
sensitive
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46646
--- Comment #7 from Will Rowe <wr...@apache.org> 2010-02-24 18:41:42 UTC ---
(From update of attachment 23238)
+1 - the patch looks rational.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 46646] check group membership is sometimes case
sensitive
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46646
Sven Strickroth <em...@cs-ware.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #23238|0 |1
is obsolete| |
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 46646] check group membership is sometimes case sensitive
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46646
--- Comment #8 from Sven Strickroth <em...@cs-ware.de> ---
This patch also helps to canocialize usernames (e.g. if a DN is found by an
alias or multiple uid/cn entries).
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 46646] lowercase username
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46646
Sven Strickroth <em...@cs-ware.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
Severity|enhancement |normal
Version|2.2.10 |2.2.11
--- Comment #5 from Sven Strickroth <em...@cs-ware.de> 2009-02-06 08:04:45 PST ---
instead of lowercasing the usernames it should be better to use the
"AuthLDAPRemoteUserAttribute" for group member comparison too...
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 46646] lowercase username
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46646
Eric Covener <co...@gmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |NEEDINFO
--- Comment #2 from Eric Covener <co...@gmail.com> 2009-02-02 12:23:33 PST ---
searches for samAccountName=foo appear to be case insensitive OOTB.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 46646] lowercase username
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46646
Sven Strickroth <em...@cs-ware.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEEDINFO |ASSIGNED
--- Comment #3 from Sven Strickroth <em...@cs-ware.de> 2009-02-03 10:45:03 PST ---
I'm using
"AuthLDAPRemoteUserAttribute uid
AuthLDAPGroupAttribute memberUid
AuthLDAPGroupAttributeIsDN Off
AuthBasicProvider ldap
require ldap-group cn=Domain Admins,ou=Group, dc=DOMAIN,dc=de"
and memberUid doesn't seem to be case insensitive (memberUid is from
posixGroup, which is also used by samba domain groups).
If I try "require valid-user" it seems to be case insensitive.
But REQUEST_USER environ variable seems to be lowercased everytime (that's good
for statistics).
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 46646] lowercase username
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46646
--- Comment #4 from Eric Covener <co...@gmail.com> 2009-02-03 11:34:16 PST ---
I see, "AuthLDAPGroupAttributeIsDN on" and pointing to a case-sentitive
attribute for the group check is the part where it breaks down.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org